3.7
CVE-2012-5659
- EPSS 0.45%
- Veröffentlicht 12.03.2013 23:55:01
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginUntrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Automatic Bug Reporting Tool Version <= 2.0.9
Redhat ≫ Automatic Bug Reporting Tool Version2.0.0
Redhat ≫ Automatic Bug Reporting Tool Version2.0.1
Redhat ≫ Automatic Bug Reporting Tool Version2.0.2
Redhat ≫ Automatic Bug Reporting Tool Version2.0.3
Redhat ≫ Automatic Bug Reporting Tool Version2.0.4
Redhat ≫ Automatic Bug Reporting Tool Version2.0.4.980
Redhat ≫ Automatic Bug Reporting Tool Version2.0.4.981
Redhat ≫ Automatic Bug Reporting Tool Version2.0.5
Redhat ≫ Automatic Bug Reporting Tool Version2.0.6
Redhat ≫ Automatic Bug Reporting Tool Version2.0.7
Redhat ≫ Automatic Bug Reporting Tool Version2.0.8
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.45% | 0.354 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 3.7 | 1.9 | 6.4 |
AV:L/AC:H/Au:N/C:P/I:P/A:P
|
http://git.fedorahosted.org/cgit/abrt.git/commit/?id=b173d81b577953b96a282167c7eecd66bf111a4f
http://rhn.redhat.com/errata/RHSA-2013-0215.html
https://bugzilla.redhat.com/show_bug.cgi?id=854011